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Abstract 

Let E be an ordinary elliptic curve over a finite field W q of q ele- 
ments and x(Q) denote the x-coordinate of a point Q = (x(Q),y(Q)) 
on E. Given an IFg-rational point P of order T, we show that for any 
subsets A, B of the unit group of the residue ring modulo T, at least 
one of the sets 

{x{aP) + x(bP) : a £ A, b £ B} and {x(abP) : a £ A, b £ B} 

is large. This question is motivated by a series of recent results on the 
sum-product problem over finite fields and other algebraic structures. 
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1 Introduction 



We fix an ordinary elliptic curve E over a finite field W q of q elements. 
We assume that E is given by an affine Weierstrafi equation 

E : y 2 + (aix + a 3 )y = x 3 + a 2 x 2 + a 4 x + a 6 , 

with some a±, . . . , a 6 G F g , see [TTj . 

We recall that the set of all points on E forms an Abelian group, with the 
point at infinity O as the neutral element. As usual, we write every point 
Q^0onEasQ = (x(Q),y(Q)). 

Let E(F 9 ) denote the set of F^-rational points on E and let P G E(F g ) 
be a fixed point of order T. 

Let TL T denote the residue ring modulo T and let be its unit group. 

We show that for any sets A, B C Z^,, at least one of the sets 

S = {x(aP) + x(bP) : aeA, beB}, 

T={x(abP) : aeA, beB}, ' " 

is large. 

This question is motivated by a series of recent results on the sum-product 
problem over W q which assert that for any sets A, B C W q , at least one of 
the sets 

g = { a + b : a G A, b G B} and U = {ab : a G A, b G B} 

is large, see [21 [31 El [9], [101 EH [12] f° r the background and further references. 

We remark that yet another variant of the sum-product problem for el- 
liptic curves has recently been considered in [16J where it is shown that for 
sets 7l,(S C E(F 9 ) at least one of the sets 

{x(R)+x(S) : ReTZ, SeS} and {x(R © S) : ReTZ, S G S} 

is large, where © denotes the group operation on the points of E. 

As in |16j . our approach is based on the argument of M. Garaev [6] which 
we combine with a bound of certain bilinear character sums over points of 
E(Fq) which have been considered in [lj (instead of the estimate of (15] used 
in [TBI). 
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In fact here we present a slight improvement of the result of [TJ that is 
based on using the argument of [7J. 

Throughout the paper, the implied constants in the symbols 'O' and 
£ <C' may depend on an integer parameter v > 1. We recall that I ■€ F 
and X = 0(Y) are both equivalent to the inequality \X\ < cY with some 
constant c > 0. 

Acknowledgements. This paper was initiated during a very enjoyable visit 
of I. S. at the Department of Combinatorics & Optimization of the University 
of Waterloo whose hospitality, support and stimulating research atmosphere 
are gratefully appreciated. Research of I. S. was supported by ARC grant 
DP0556431. 



2 Bilinear Sums over Elliptic Curves 



Let 



T p ^,JC,M) = J2 



keK. 



p{k)'d{m)ip{x{kmP)) 



(2) 



where /C, M. C Z^, p{k) and r d{m) are arbitrary complex functions supported 
on K, and Ai with 



\p(k)\ < 1, keK-, and 



(m)\ < 1, m e A4, 



and ^ is a nontrivial additive character of W q . 

These sums have been introduced and estimated in [TJ. Here we obtain a 
stronger result by using the approach to sums of this type given in [7]. 

Theorem 1. Let E be an ordinary elliptic curve defined over W q , and let 
P G E(Fg) be a point of order T. Then, for any fixed integer v > 1, for all 
subsets /C, Ai C and complex functions p(k) and ^(m) supported on JC 
and M. with 

\p{k)\ < 1, k e )C, and |tf(m)| < 1, m e M, 
uniformly over all nontrivial additive characters ip of W q 

T p> ^,JC,M) < (#/C) 1 ~^(#Al)^T^)g 3 ^W(logg)^2. 
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Proof. We follow the scheme of the proof of [7J Lemma 4] in the special case 
of d = 1 (and also 7Lj> plays the role of Furthermore, in our proof 

/C, Ai, H? T play the roles of X, Cd and Ud in the proof of [71 Lemma 4], 
respectively. In particular, for some integer parameter L with 

l<£<T(logg)- 2 (3) 

we define V as the set of the first L prime numbers which do not divide 
#E(IF 9 ) (clearly we can assume that, say T > (logg) 3 , since otherwise the 
bound is trivial). We also note that in this case 

max v = 0(#V logg). (4) 



Then we arrive to the following analogue of [7J Bound (4)]: 



where 



M t 



J2#(vt)xM(vt)ilj (x(zvP)) 



vev 



2i> 



and xm is the characteristic function of the set M.. We only deviate from 
that proof at the point where the Weil bound is applied to the sums 



£exp 



zen 



2nia 
P 



2u 



E 2 '"'- E ; 



tv , 



<C max d»o 
i<i<2f 



1/2 



where 7i is an arbitrary subgroup of F* and v i, . . . , v 2u are positive integers 
(such that (i>„+i, • • • , ^2w) is not a permutation of (vi, . . . , v u )). Here, as in [TJ 
we use instead the following bound from |14j : 



2,/ 



/2 



QeH \i=l 



j=u+l 



where H is the subgroup of E(F P ) (in our particular case 7i = (P) is gener- 
ated by P) and t>i, . . . , v 2u are the same as in the above, that is, such that 
(tV+i, • • • , v 2u ) is not a permutation of (t> 1; . . . , v u ). 
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Now since 7^E(F g ) = 0(q), using an argument similar to the one given 
in [7] and recalling (j3J) we obtain 

M t « e-e (n^MjT 

fiev v v ev \j=i / 

+ E- " E (li^(V))? 1/2 (#Vlogg) 2 . 

uieV t^eV \i=i / 

Therefore 

Wv / Wv / 

This leads to the following 

ZUik/C,A<) « (# ?v^ T ^E fE^(^)) 

^ tez* \«eV / 



On the other hand we have 



E fexM(t>t) J =#A^#V, 
and by the Cauchy inequality we get 

E (Exmm) ^ ^ z ^ 1/2 ( E E^(^)) 



< T 1 ' 2 {4M#V) 1/2 . 

Thus 



#V) 1/2 ^ (5) 



lir •'J 



Let 



v+l 



(log q) "+ 2 (#M) v+2 
We note that if L = then 

< g^+2j(l gg)^T2 < g2(^T2) (log g) ^ T^2 

and thus 

T<q 1 ' 2 (logg) 2 . 
It is easy to check that in this case 

( #/C ) 1 ~ £ ( # M ) ^+5 g (log g) ^ 



> (#/C)"^(#A^)"^T^ ; ^ 5 )g^W(logg)^ 

_ i i g+i i i 

>T 2uT "+2T"("+ 2 )g 4 (''+ 2 ) (logg)"+ 2 

- 1 i i 
= T 2 ("+ 2 ) g 4 ("+ 2 ) (logg) "+ 2 > 1. 

thus the result is trivial. 

We now assume that L > 1 and choose V to be of cardinality #V = L. 
Then we have 



v+l 



(log q) -+ 2 (#.M) "+ 2 



— >#V> 



■u + l 
T^+2 



2g2l^+2) (log q) v+2 (#M) "+ 2 



and L < T(logg) 2 provided that g is large enough. Now the result follows 



from (15]). 



□ 



3 Lower Bound for the Sum-Product Prob- 
lem on Elliptic Curves 

Theorem 2. Let A and B be arbitrary subsets ofH? T . Then for the sets S 
and T, given by (T7]) ; we have 

#S#T » min{g#^, (M) a (#B) 6/ V 1/6 r-^ 3 (log?)" 2/8 }- 
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Proof. Let 



H = {ab : a E A, b E B}. 



Following the idea of M. Garaev |6J, we now denote by J the number of 
solutions (61, 6 2 , h, u) to the equation 

x(hb^P) +x(b 2 P) =u, b u b 2 eB, hen, ueS. (6) 

Since obviously the vectors 

(61, 6 2 , h, u) = (61, 6 2 , abi, x(aP) + x(b 2 P)) , a e A, b\, b 2 G £>, 

are all pairwise distinct solutions to (J6]), we obtain 

J > #A(#B) 2 . (7) 

To obtain an upper bound on J we use ^ to denote the set of all q additive 
characters of W q and write \P* for the set of nontrivial characters. Using the 
identity 

we obtain 

heB b 2 eB hen ues ^ ipe^ 
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i/>ef b 1 eBheH 
Q 



b 2 eB 



ueS 



+ - E E E v> (^r 1 ^)) E ^ E v> (-«) 



biee hen 



b 2 eB 



ues 



Applying Theorem [T] with p(k) = $(to) = 1, K — n and .M = {6 1 : 6 G 
B} and also taking i/ = 1, we obtain 



WeBhen 



< A 



where 
Therefore, 



A = (#H) 1/2 (#t3) 2/3 T 2/3 q 1/12 (logq) 



1/3 



[#B) 2 #S#H , 1 



beB 



«e5 



-w 



(9) 



Extending the summation over ^ to the full set \P and using the Cauchy 
inequality, we obtain 



E 



£>(s(6P)) 



beB 



«e<s 



< 



\ 



E 




2 


E 


5>(«) 




6eB 


\ 




«e<s 



(10) 



Recalling the orthogonality property (|HJ), we derive 



E 



6eB 



?#{(6i, 62) eB 2 : h = ±b 2 (mod T)} « q#B. 



Notice that b\ = —b 2 (mod T) has been included since x(P) = x(—P) for 
P e E(F,). 
Similarly, 



E 



mS5 



Substituting these bounds in (TTD1) we obtain 



E 



X>(*(W)) 



beB 



E* 



« gv /#£#S, 



which after inserting in ([2]), yields 



A(#5) 1 / 2 (#i3) 1 / 2 



(11) 
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Thus, comparing (j7j) and (TTTj) . we derive 



Q 

Thus either 



:#i3) 2 #5#^ >> # ^ (#s)2; (12) 



Q 
or 

A(#5) 1 / 2 (#i3) 1 / 2 » #^l(#i3) 2 . (13) 
If (fT2l) holds, then we have 



» #A 

If (fl3l) holds, then recalling the definition of A, we derive 

( #5 ) 1 / 2 (#^) 1 / 2 (#S) 5 / 3 T 2 / 3 g 1 / 12 (logg) 1 / 3 » #A(#B) 2 . 
It only remains to notice that j^T > 0.5#7i to conclude the proof. □ 

We now consider several special cases. 

Corollary 3. For any fixed e > there exists 5 > such that if A, B C 
are arbitrary subsets with 

q 1 -" >#A>#B> T 4 / 5+ y/ 10 , 

taen /or iae sets 5 and T , given by (TJP, we aave 

#S#T»(#„4) 2+5 . 

In particular, if T > q l ' 2+£ then there is always some nontrivial range of 
cardinalities j^A and j^B in which Corollary [3] applies. 

Corollary 4. for arbitrary subsets ofA,B C Z^ 

#^ = #£>T 1 /y/ 16 (logg) 1 / 4 
and /or the sets S and T, given by (QP, we have 

#S#T » a#A 



4 Upper Bound for the Sum-Product Prob- 
lem on Elliptic Curves 

We now show that in some cases the sets S and T are not very big. 
As usual, we use <p(T) = jfZT T to denote the Euler function. 

Theorem 5. Let q = p be prime and let T > p 3 / 4+e . Then there are sets 
A = B C of cardinality 



as p — ► oo . 

Proof. We recall the bound from [13] of exponential sums over subgroups of 
the group of points on elliptic curves which in particular implies that for any 
subgroup Q of E(F p ) the bound 



Gee 

holds uniformly over all integer A with gcd(A,p) = 1. 

Let fi(d) be the Mobius function, that is, /x(l) = 1, /i(m) = if m > 2 



#^ = #B = (l + o(l)) 



2p 



such that for the sets S and T, given by (Op, we have 



max{#5, #T} < (V2 + o(l))yfi#A 




(14) 




T 



T 




a=l 
gcd(a,T)=l 



d\T 



a=l 

d\a 

T/d 



^/i(rf)^exp(27rzAx(6P)/p). 



d\T 6=1 
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Using (1141) and recalling that 

^2 1 = T o(1) 

d\T 

see [8j Theorem 317], we derive 



exp (2mXx(aP)/p) < p 1/2+ ° 



(i) 



a=l 
gcd(a,T)=l 

Combining this with the Erdos-Turan inequality, see [H Theorem 1.21], we 
see that for any positive integer H, there are Hip(T) /p+O (p 1 / 2 +°( 1 )) elements 
a G with x(aP) G [0, H — 1]. Let ^4 = B be the set of these elements a. 
For the sets S and T, we obviously have 

#5 < 2H and #T < <^(T). 

We now choose H = cp(T)/2. Since T > p 3 / 4+e and also since 

<p{T) » f 

log log i 

see P Theorem 328], we have 

#^ = #i3 = ^ + O (p 1 ^) = (1 + 

as p — > oo. Therefore 

max{#S, #T} < (y/2 + o(l)) 
which concludes the proof. □ 

We remark that if T > p 23 / 24+£ ; then the cardinality of the sets A and 
B of Theorem [5] is 

= = T^V 1 > T 1 / 2 / 716 (log P) 1/4 
and thus Corollary [4] applies as well and we have 

(V2 + o(l)) v^U > max{#5, #T} > y^W » 
showing that both Corollary H] and Theorem are tight in this range. 
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5 Comments 



We remark that using Theorem [T] with other values of v in the scheme of the 
proof of Theorem [2] one can obtain a series of other statements. However 
they cannot be formulated as a lower bound on the product #iS#T. Rather 
they only give a lower bound on maxj^iS, #T} which however may in some 
cases be more precise than those which follow from Theorem [21 

Certainly extending the range in which the upper and lower bounds on 
j^S and j^T coincide is also a very important question. 
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